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WHAT IS CLAIMED IS: 

iSiy A method of implementing an elliptic curve 

cry^ography in a finite field of characteristic 2 (or an 
extensiJLon field of "2"), in which said elliptic curve is 
given bV + xy = + ax^ + b and in which x and y are 
variablesXin an x-y coordinate system, a and b are 
parameters ,\ addition of points Pl(xl, yl) and P2(x2, y2) 
on said elliptic curve composed of points defined by 
individual cooi^iinate components is presumed to be 
represented by fQ(x3/ y3) with subtraction of said points 
Pl(xl, yl) and P2\x2, y2 ) being presumed to be repre- 
sented by P4(x4, y^ f comprising the steps of: 

inputting iihe coordinate component xl; 

transf ormingv said inputted coordinate component 
xl into X- and Z-coordiVates [X^, Z^] of a projective 
space where Z is a variabsle in the Z-coordinate; 

storing said coordinates [X^, Z^ ] of said 
projective space; \ 

transforming said coordinate component x2 into 
coordinates [X2, Z^] of said projective space; 

storing said projective coordinate [X2/ Zg]; 

transforming said coorcmnate component x4 into 
coordinates [X^, Z^] of said projective space; 

storing said projective coordinates [X^, 2^]; 

determining projective coordinates [X3, Z3] from 
said stored projective coordinates [x\, Z^], [X2, Z2] and 

[x^/ zj; \ 

transforming said pro jective \coordinates [X3, 
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z\] into said coordinate component x3; and 

\ 

\^ outputting said coordinate component x3, 

whereby scalar multiplication of said point 
Pl(xl, ^1) is determined. 

2. \a method of implementing an elliptic curve 
cryptograpKy according to claim 1^ 

fui^ther comprising the steps of: 

rating a random number k; 
storing said generated random number k; 
transforming the x-coordinates into projective 
coordinates to thereby derive projective coordinates [k^x, 
k] through arithmetic: operation of individual coordinate 
components of said pinpjective space and said stored 
random number k. 

3. A method of iihplementing an elliptic curve 
cryptography according tov claim 1, 

further comprising the steps of: 

generating a random number k; 

storing said generated random number k; 

transforming the x-ppordinates into projective 
coordinates to thereby derive mrojective coordinates [kx^ 
k] through arithmetic operation \of individual coordinate 
components of said projective spJjce and said stored 
random number k. 

4 . A method of implementing an elliptic curve 
cryptography according to claim 1, 

wherein the step of determining said projective 
coordinates [X3, Z3] susceptible to ^he transformation 
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into said coordinate component x3 from said stored 
projective coordinates [X^, Z^], [X^, Z^] and [X^, Z^] 
includes the substeps of: 

computing B = ^'y^^^ + ^pZ^^; 
storing said computed B; 
voiding whether or not said stored B satisfies 
condition that B = 0; 

outputting a point at infinity when B = 0 while 
arithmetically dettermining Z3 = Z^B unless B = 0; 
storing ^aid determined Z^j and 

arithmetidally determining X3 = X^B^ + X^X^^Z^Z^ 
from said stored Z3. 

5. A method of i\nplementing an elliptic curve 
cryptography according to claim 1, 

wherein the stepXof determining said projective 
coordinates [X3, Z3] susceptible to transformation into 
said coordinate component x3 \f rom said stored projective 
coordinates [X^^ Z^], \X^9 Z^] knd [X^, Z^] includes the 
substeps of: 

computing B = X^Z2 + ^2^1' 

storing said computed B; 

deciding whether or not ^aid stored B satisfies 
condition that B = 0; and 

outputting a point at infidity when B = 0 while 
determining arithmetically Z3 = Z^B^ am 
= X^B^ + X^X^Z^Z^Z^ unless B = 0 

6. An apparatus implementing an Elliptic curve 
cryptography in a finite field of characueristic 2 (or an 
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Wtension field of "2"), in which x and y are variables 
in\an x-y coordinate system, a and b are parameters, said 
elliptic curve is given by y^ + xy = x^ + ax^ + b, 
comprising : 

Vrandom number generating means for generating a 
random number k; 

protective coordinate transformation means 
receiving as inputs thereto coordinate xO of said finite 
field of characteristic 2 and said random number k, to 
thereby transform ^aid coordinate xO into projective 
coordinates [kxO, k\ = ] ; 

doubling ai?ithmetic means for arithmetically 
determining a double p®int from said projective 
coordinates [ , 2^ ] ; \ 

addition arithmetic means for determining an 
addition point from said projective coordinate [X^, ] 
where Z is a variable in the Z-coordinate to thereby 
output said addition point; and 

scalar multiplication means receiving informa- 
tion from said projective coorcrinate transformation 
means, said doubling arithmetic means and said addition 
arithmetic means to thereby perform scalar multiplication 
of the coordinate component xO . \ 

7 . A recording medium storing a program for 

implementing an elliptic curve cryptography in a finite 
field of characteristic 2 (or an extension field of "2"), 
in which said elliptic curve is given\ by y^ + xy = x^ + ax' 
+ b and in which x and y are variables in an x-y 
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"Coordinate system, a and b are parameters, addition of 
points Pl(xl, yl) and P2(x2, y2) on said elliptic curve 
composed of points defined by individual coordinate 
components is presumed to be represented by P3(x3, y3) 
with subtraction of said points Pl(xl, yl) and P2(x2, y2) 
being presumed to be represented by P4(x4, y4 ) , said 
program comprising the statements of: 

inputting an coordinate component xl; 

transforming said inputted coordinate component 
xl into X- and \Z-coordinates [X^, Z^] in a projective 
space; \ 

storingVsaid coordinates [X^, Z^] of said 
projective space; \ 

transforming said coordinate component x2 into 
coordinates [X2, Z^] of said projective space; 

storing saiov projective coordinate [Xg, Z^] 
where Z is a variable iVi the Z-coordinate; 

transforming s>aid coordinate component x4 into 
coordinates [X^, Z^] of said projective space; 

storing said protective coordinates [X^, Z^] ; 

determining projeyctive coordinates [X3, Z3] from 
said stored projective coorainates [X^, 2^], [X2, Z^] and 
ZJ; V 

transforming said projective coordinates [X3, 
Z3] into said coordinate component x3; and 

outputting said coordinate component x3, 

whereby scalar multiplication of said point 
Pl(xl, yl) is determined. 1 




- 62 - 



5 ♦ A recording medium storing a program for 

implementing an elliptic curve cryptography according to 

said program further comprising the statements 

generating a random number k; 
storing said generated random number k; 
trans\forming the x-coordinates into projective 
coordinates to tr^ereby derive projective coordinates [k^x, 
k] through arithmetic operation of individual coordinate 
components of said ptrojective space and said stored 
random number k. \ 

9- A recording medium storing a program for 

implementing an ellipticv curve cryptography according to 
claim If \ 

said program further comprising the statements 
of: \ 

generating a random \number k; 

storing said generated random number k; 

transforming the x-coordinates into projective 
coordinates to thereby derive protective coordinates [kx, 
k] through arithmetic operation of \ individual coordinate 
components of said projective space\and said stored 
random number k. \ 
10. A recording medium storing a program for 

implementing an elliptic curve cryptography according to 
claim 7, \ 

wherein the said statement of \determining said 




\ projective coordinates [X3, Zj] susceptible to 
transformation into said coordinate component x3 from 
said stored projective coordinates [X^, 2^], [X^, Z^] and 
[X^,\z^] includes further the statements of: 
\ computing B = X^Z^^ + ^2^1^' 
\ storing said computed B; 

\deciding whether or not said stored B satisfies 
condition that B = 0; 

outvputting a point at infinity when B = 0 while 
determining arithmetically Z3 = Z^B unless B = 0; 

storing said determined Z^; and 

determinang arithmetically X3 
= X^Zj^ + X^X2Z^^Z2^Z^^ \f rom said stored Z3. 
11. A recordingXmedium storing a program for 

implementing an elliptj^c curve cryptography according to 
claim 1, \ 

wherein the statement of determining said 
projective coordinates [X3A Z3] susceptible to 
transformation into said coordinate component x3 from 
said stored projective coordinates [X^^ ] , [X2, Z2] and 
[X^, Z^] includes further the statements of: 

computing B = X.JZ2 + 

storing said computed B; 

deciding whether or notXsaid stored B satisfies 
condition that B = 0; and \ 

outputting a point at infinity when B = 0 while 
determining arithmetically Z3 = Z^B^ and X3 
= X^B^ + X^X^Z^Z^Z^ unless B = 0. \ 



A computer program, on a medium for 
lamenting an elliptic curve cryptography in a finite 
fie^d of characteristic 2 (or an extension field of "2"), 
in which said elliptic curve is given by y^ + xy = x^ + ax' 
+ b and in which x and y are variables in an x-y 
coordinate system, a and b are parameters, addition of 
points PlVxl, yl) and P2(x2, y2) on said elliptic curve 
composed of points defined by individual coordinate 
components is presumed to be represented by P3(x3, y3) 
with subtraction of said points Pl(xl, yl) and P2(x2, y2) 
being presumed to be represented by P4(x4, y4 ) , said 
program comprising the statements of: 

inputting an coordinate component xl; 
transforming said inputted coordinate component 
xl into X- and Z-opordinates [X^, Z^] in a projective 
space; \ 

storing said coordinates [X^, Z^] of said 
projective space; \ 

transforming said coordinate component x2 into 
coordinates [X2, Z^] of\said projective space; 

storing said projective coordinate [X2, Z^] 
where Z is a variable in\the Z-coordinate ; 

transforming said coordinate component x4 into 
coordinates [X^, Z^] of said projective space; 

storing said projective coordinates [X^, Z^]; 
determining projective coordinates [X3, Z3] from 
said stored projective coordinates [X^, Z^], [Xj, Z^] and 
[X^, ZJ; \ 
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transforming said projective coordinates [X 

Z3] into said coordinate component x3; and 

outputting said coordinate component x3, 
whereby scalar multiplication of said point 

Pl(xl^ yl) is determined. 



